This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xpeee0CnkBpvFxiMmtmApBpME4w.roa File: Xpeee0CnkBpvFxiMmtmApBpME4w.roa (raw, json) Hash identifier: RirgsxiFrQbsBC4XA1a3k9RytTd4QD0JFLu3S3Jyb+g= Subject key identifier: 5E:97:9E:7B:40:A7:90:1A:6F:17:18:8C:9A:D9:80:A4:1A:4C:13:8C Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Certificate serial: 019488FDDFAFCA788284DBD6904587F95A06 Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xpeee0CnkBpvFxiMmtmApBpME4w.roa Signing time: Tue 21 Jan 2025 13:12:06 +0000 ROA not before: Tue 21 Jan 2025 13:12:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:88:fd:df:af:ca:78:82:84:db:d6:90:45:87:f9:5a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf Validity Not Before: Jan 21 13:12:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e979e7b40a7901a6f17188c9ad980a41a4c138c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:89:d8:d4:26:9c:e7:29:57:7d:7a:43:b5: 8b:02:d8:cf:a5:11:ea:86:d7:f5:2c:41:0d:93:52: 47:55:7c:ba:b9:9f:0b:5a:11:fd:af:82:94:1b:c8: eb:9e:9a:5f:d9:de:78:d9:f3:98:a0:32:4f:d9:8c: 50:8f:0f:35:53:dc:9b:1d:f6:27:f1:fa:1c:6f:80: bb:44:fd:3f:12:18:51:15:20:04:07:79:bc:ef:5c: 42:7a:7b:ca:e0:ce:81:e4:6e:f8:3d:eb:60:67:1a: a6:61:b0:0c:59:4e:eb:5d:ee:70:f8:34:78:b6:db: 3d:00:53:05:17:91:27:f6:18:0f:7e:d3:9c:02:2a: f8:2d:ec:b1:28:ca:c6:97:d1:1c:48:c0:3c:e9:74: a2:a8:4d:12:e4:28:e0:0e:aa:0b:8e:bc:9d:75:32: 9e:06:b8:f2:9b:71:8f:06:e9:49:09:85:6d:dc:7d: c3:7e:d9:42:b4:50:4e:3b:92:83:e5:6e:84:62:a6: a8:5e:89:56:24:c2:81:c4:6c:9c:46:41:8d:90:4c: 9b:c3:fc:82:15:28:0e:77:ef:76:ac:2b:d4:9f:d1: c0:f1:5f:4d:45:2d:e0:ae:15:39:68:91:94:60:3e: 8c:cf:ad:c4:7d:5c:39:63:0d:ae:28:a8:79:bd:ea: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:97:9E:7B:40:A7:90:1A:6F:17:18:8C:9A:D9:80:A4:1A:4C:13:8C X509v3 Authority Key Identifier: keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Xpeee0CnkBpvFxiMmtmApBpME4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:194:2c0d:6680/128 Signature Algorithm: sha256WithRSAEncryption 96:59:50:43:c6:a5:0d:0b:a8:09:d0:bc:35:88:58:8e:f8:69: 56:c5:dc:aa:5e:32:d3:ad:46:ea:82:61:60:3b:fa:b0:35:07: bb:17:be:c2:69:9e:9c:25:36:7c:e5:70:d2:7f:f7:26:2f:54: e2:43:bd:0f:2d:23:55:d9:3d:d8:ce:b5:cb:ae:9d:af:3d:ef: 66:dc:70:c5:67:3d:c3:d4:46:e1:28:7d:81:18:38:76:cb:39: dc:36:ae:b3:56:c3:2b:52:5e:a2:88:9b:cf:96:4f:7e:77:1d: f3:6f:70:51:5d:3d:f1:02:29:38:67:c1:5d:ac:6f:6d:04:83: 65:c4:95:4a:e2:55:32:c2:43:fb:b5:9a:64:06:e0:be:52:ce: f0:60:bd:75:21:0e:18:44:b2:d7:a4:a1:60:8b:54:79:7f:42: cb:b4:e1:1e:1a:19:f5:46:39:6c:44:26:2c:c0:fc:b0:2e:88: ec:7b:02:1f:cd:a6:f5:f8:91:12:e5:3e:f4:ec:04:10:97:9a: c6:50:fe:1a:1f:15:be:40:ca:d1:86:7b:04:be:6c:d4:5e:62: f6:8c:cc:5b:61:14:1e:62:01:3a:0e:00:6e:fe:a2:43:25:c7: a8:21:16:f8:fb:46:19:c6:23:27:78:ce:48:77:31:51:f2:c7: 40:8c:c0:91 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZSI/d+vyniChNvWkEWH+VoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy MmRkYmYwHhcNMjUwMTIxMTMxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTk3OWU3YjQwYTc5MDFhNmYxNzE4OGM5YWQ5ODBhNDFhNGMxMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUSJ2NQmnOcpV316Q7WLAtjPpRHq htf1LEENk1JHVXy6uZ8LWhH9r4KUG8jrnppf2d542fOYoDJP2YxQjw81U9ybHfYn 8focb4C7RP0/EhhRFSAEB3m871xCenvK4M6B5G74PetgZxqmYbAMWU7rXe5w+DR4 tts9AFMFF5En9hgPftOcAir4LeyxKMrGl9EcSMA86XSiqE0S5CjgDqoLjryddTKe Brjym3GPBulJCYVt3H3DftlCtFBOO5KD5W6EYqaoXolWJMKBxGycRkGNkEybw/yC FSgOd+92rCvUn9HA8V9NRS3grhU5aJGUYD6Mz63EfVw5Yw2uKKh5veqGRwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFF6XnntAp5AabxcYjJrZgKQaTBOMMB8GA1UdIwQY MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt ODgxNDg4ZmZkYmIwLzEvWHBlZWUwQ25rQnB2RnhpTW10bUFwQnBNRTR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAlllQQ8alDQuoCdC8NYhYjvhp VsXcql4y061G6oJhYDv6sDUHuxe+wmmenCU2fOVw0n/3Ji9U4kO9Dy0jVdk92M61 y66drz3vZtxwxWc9w9RG4Sh9gRg4dss53Daus1bDK1Jeooibz5ZPfncd829wUV09 8QIpOGfBXaxvbQSDZcSVSuJVMsJD+7WaZAbgvlLO8GC9dSEOGESy16ShYItUeX9C y7ThHhoZ9UY5bEQmLMD8sC6I7HsCH82m9fiREuU+9OwEEJeaxlD+Gh8VvkDK0YZ7 BL5s1F5i9ozMW2EUHmIBOg4Abv6iQyXHqCEW+PtGGcYjJ3jOSHcxUfLHQIzAkQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:12 2025 by rpki-client